Live findsCVE IntelResearchConsoleStart free
huntback / IP intelligence

58.221.60.160

RESIDENTIALoperator-submittedloot-ipelf-binaryexploitexposed-secretmacho-binary

Intelligence

ASN / OrgAS4134 · Chinanet
CountryChina
NetworkRESIDENTIAL · risk 15/100
Threat score0/100
Open ports22, 1337, 8000, 8001, 8080, 9000, 18080, 1389
ServiceSimpleHTTP/0.6 Python/3.10.12 · Directory listing for /
Loot harvested35 file(s), 4260 KB · c2, elf-binary, exploit, exposed-secret, macho-binary, malware

Open directory contents (35)

Files harvested from this host's exposed directory. File names only — victim-identifying names are redacted and file contents are never published.

FileTypeSize
http.logLOG1.9 MB
im_floodELF883 KB
‹redacted›.jarJAR574 KB
cookies.txtTXT467 KB
‹redacted›.jarJAR241 KB
‹redacted›.jarJAR59 KB
listen1389.logLOG22 KB
php_targets.txtTXT15 KB
a.pyPY13 KB
verify_fixation.pyPY5 KB
probe_rfc1867.pyPY5 KB
‹redacted›.classMACHO4 KB
‹redacted›.classMACHO4 KB
‹redacted›.javaJAVA3 KB
‹redacted›.classMACHO3 KB
‹redacted›.classMACHO3 KB
‹redacted›.javaJAVA2 KB
‹redacted›.javaJAVA2 KB
‹redacted›.classMACHO2 KB
cookies_gcm.txtTXT2 KB
ldap_srv.pyPY2 KB
‹redacted›.javaJAVA2 KB
‹redacted›.classMACHO1 KB
‹redacted›.serSER1 KB
‹redacted›.serSER1 KB
probe_actuator.shSH981 B
probe_actuator2.shSH858 B
listen1389.pyPY702 B
‹redacted›.classMACHO679 B
scan.shSH534 B
attack_gcm.shSH534 B
attack.shSH495 B
‹redacted›.javaJAVA349 B
ldap_listen.logLOG27 B
ldap.logLOG23 B
Hunt this IP

Pivot across IPs, domains, certificates, JARM fingerprints and exposed open directories, backed by our own sensor network. Free tier, no card required.

Start hunting free

Related infrastructure

Hosts sharing signals (JARM, cert, passive DNS, hosted files). A JARM-only link is a lead, not proof.

18.136.195.202confirmed
203.194.115.12confirmed
38.76.208.29confirmed
43.161.243.73confirmed
49.51.230.17confirmed
64.23.240.211confirmed